$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: QPXvWbEI3SpE++hjWHX78+vQyp0YdvhKJwFBWuGLxac= Subject key identifier: 15:6A:89:E4:6F:28:D2:5C:0E:94:62:E3:FA:7D:3F:0A:CB:26:2B:34 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 2A319FD5668FC42F93DD15A959B763131A6D6FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 018A Signing time: Fri 22 Aug 2025 09:02:24 +0000 Manifest this update: Fri 22 Aug 2025 08:57:24 +0000 Manifest next update: Mon 25 Aug 2025 14:59:24 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: E88oA3PF831JXny68idgZcngb1JxqzMT+MSHhm5V67s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:31:9f:d5:66:8f:c4:2f:93:dd:15:a9:59:b7:63:13:1a:6d:6f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Aug 22 08:57:24 2025 GMT Not After : Aug 25 14:59:24 2025 GMT Subject: CN=156A89E46F28D25C0E9462E3FA7D3F0ACB262B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:c0:a5:58:cd:4c:23:88:cf:5f:f8:14:b9: e2:74:16:66:19:7f:87:fd:c4:0f:be:c0:a6:9b:cc: 98:03:bb:e5:d3:3e:85:25:ed:67:d8:86:41:2a:bb: 0f:14:71:5e:11:c5:90:7d:58:22:c5:f8:5b:11:b8: 5d:fb:0a:b4:33:5a:ba:2d:ae:8f:25:8a:3b:c4:ff: 6b:06:1f:b2:9a:59:5e:21:4e:97:d9:51:f0:ef:5f: 27:ef:fa:c0:b9:44:31:5f:15:be:0f:e1:e9:ab:cd: 9b:59:c8:e2:d4:4b:bb:43:55:e0:0d:7b:48:5c:d1: 07:a7:82:12:fa:31:51:74:8f:29:d0:55:e7:8a:ac: 12:20:5f:d2:78:3a:6a:6d:8e:88:b2:0e:31:78:4b: 2f:a0:54:32:26:a6:64:bf:c7:30:b5:18:b1:34:5d: 12:ef:60:84:95:4d:bb:f4:90:57:4d:d8:37:20:8d: 1a:5a:db:12:98:66:f1:ed:3f:cd:79:9f:52:f3:1f: 10:a0:5d:11:6d:3d:e1:ec:6a:d5:0c:34:41:b6:fc: 56:f4:5e:bd:db:d1:3c:54:d4:44:11:cd:ea:c2:ce: 04:ad:37:a7:e7:00:14:af:42:df:19:8e:f7:d2:5b: 3b:3f:ac:8a:4c:a4:f9:fc:1a:f5:1d:13:04:33:ce: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:89:E4:6F:28:D2:5C:0E:94:62:E3:FA:7D:3F:0A:CB:26:2B:34 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:7d:46:a8:b5:a0:c2:6e:ab:48:b9:70:fd:f8:9c:83:75: c5:c0:81:1d:43:7e:5f:1b:80:82:d3:d5:a2:4f:ea:31:e8:0b: 8c:45:60:88:c0:30:eb:1d:24:46:09:bd:e0:09:37:8d:a7:6d: d9:b6:a7:8e:b1:0c:45:6e:a0:ef:59:01:5d:a5:75:e0:29:26: 21:6c:2c:ec:3e:b4:23:c0:20:99:cb:14:c3:43:79:79:74:64: 39:8d:89:9f:67:b1:a4:ad:f6:29:fc:f7:45:fe:97:b7:ef:c7: 07:c3:9f:dc:1d:9b:81:ea:08:3a:96:cd:01:a3:66:46:7f:90: 2e:57:5d:03:5a:33:02:93:28:f8:e3:bb:71:76:e2:72:10:1b: 1a:27:0c:13:42:0c:de:97:cd:52:98:cd:03:7d:46:c8:40:01: ce:98:e3:41:0d:61:82:b1:e3:03:ee:7c:a4:b3:79:a5:7d:f5: a4:2c:69:d9:50:1f:c3:bb:3c:f6:cf:3b:0f:70:76:71:9f:6f: 0b:c1:97:79:d2:4c:b5:a9:41:df:3b:62:02:b2:20:7d:b5:3a: ea:4e:54:65:90:f0:76:8b:b8:a2:33:53:85:19:46:63:bb:5c: b6:30:16:44:f8:f0:4f:4b:c9:4a:ca:e5:84:7b:91:6f:2a:98: e8:0c:e9:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjGf1WaPxC+T3RWpWbdjExptb/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA4MjIwODU3MjRaFw0yNTA4MjUxNDU5MjRaMDMxMTAvBgNV BAMTKDE1NkE4OUU0NkYyOEQyNUMwRTk0NjJFM0ZBN0QzRjBBQ0IyNjJCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7scClWM1MI4jPX/gUueJ0FmYZ f4f9xA++wKabzJgDu+XTPoUl7WfYhkEquw8UcV4RxZB9WCLF+FsRuF37CrQzWrot ro8lijvE/2sGH7KaWV4hTpfZUfDvXyfv+sC5RDFfFb4P4emrzZtZyOLUS7tDVeAN e0hc0QenghL6MVF0jynQVeeKrBIgX9J4OmptjoiyDjF4Sy+gVDImpmS/xzC1GLE0 XRLvYISVTbv0kFdN2DcgjRpa2xKYZvHtP815n1LzHxCgXRFtPeHsatUMNEG2/Fb0 Xr3b0TxU1EQRzerCzgStN6fnABSvQt8ZjvfSWzs/rIpMpPn8GvUdEwQzzv2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWqJ5G8o0lwOlGLj+n0/CssmKzQwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGojfUaotaDCbqtIuXD9+JyDdcXAgR1Dfl8b gILT1aJP6jHoC4xFYIjAMOsdJEYJveAJN42nbdm2p46xDEVuoO9ZAV2ldeApJiFs LOw+tCPAIJnLFMNDeXl0ZDmNiZ9nsaSt9in890X+l7fvxwfDn9wdm4HqCDqWzQGj ZkZ/kC5XXQNaMwKTKPjju3F24nIQGxonDBNCDN6XzVKYzQN9RshAAc6Y40ENYYKx 4wPufKSzeaV99aQsadlQH8O7PPbPOw9wdnGfbwvBl3nSTLWpQd87YgKyIH21OupO VGWQ8HaLuKIzU4UZRmO7XLYwFkT48E9LyUrK5YR7kW8qmOgM6YA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:01 2025 by rpki-client